Apple Macos Sonoma vulnerabilities

959 known vulnerabilities affecting apple/macos_sonoma.

Total CVEs
959
CISA KEV
11
actively exploited
Public exploits
3
Exploited in wild
6
Severity breakdown
CRITICAL73HIGH289MEDIUM533LOW63UNKNOWN1

Vulnerabilities

Page 44 of 48
CVE-2023-42959HIGHCVSS 7.0v142023-09-26
CVE-2023-42959 [HIGH] CVE-2023-42959: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-42959 Component: Graphics Drivers Impact: An app may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved state handling.
apple
CVE-2023-32377HIGHCVSS 7.8v142023-09-26
CVE-2023-32377 [HIGH] CVE-2023-32377: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-32377 Component: AMD Impact: An app may be able to execute arbitrary code with kernel privileges Description: A buffer overflow issue was addressed with improved memory handling.
apple
CVE-2023-39434HIGHCVSS 8.8v142023-09-26
CVE-2023-39434 [HIGH] CVE-2023-39434: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-39434 Component: WebKit Impact: Processing web content may lead to arbitrary code execution Description: A use-after-free issue was addressed with improved memory management.
apple
CVE-2023-42826HIGHCVSS 7.8v142023-09-26
CVE-2023-42826 [HIGH] CVE-2023-42826: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-42826 Component: Model I/O Impact: Processing a file may lead to arbitrary code execution Description: The issue was addressed with improved checks.
apple
CVE-2023-32359HIGHCVSS 7.5v142023-09-26
CVE-2023-32359 [HIGH] CVE-2023-32359: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-32359 Component: WebKit Impact: A user's password may be read aloud by VoiceOver Description: This issue was addressed with improved redaction of sensitive information.
apple
CVE-2023-41074HIGHCVSS 8.8v142023-09-26
CVE-2023-41074 [HIGH] CVE-2023-41074: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-41074 Component: WebKit Impact: Processing web content may lead to arbitrary code execution Description: The issue was addressed with improved checks.
apple
CVE-2023-42875HIGHCVSS 7.3v142023-09-26
CVE-2023-42875 [HIGH] CVE-2023-42875: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-42875 Component: WebKit Impact: Processing web content may lead to arbitrary code execution Description: The issue was addressed with improved memory handling.
apple
CVE-2023-40432HIGHCVSS 7.8v142023-09-26
CVE-2023-40432 [HIGH] CVE-2023-40432: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-40432 Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.
apple
CVE-2023-40401HIGHCVSS 7.5v142023-09-26
CVE-2023-40401 [HIGH] CVE-2023-40401: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-40401 Component: Passkeys Impact: An attacker may be able to access passkeys without authentication Description: The issue was addressed with additional permissions checks.
apple
CVE-2023-40443HIGHCVSS 7.8v142023-09-26
CVE-2023-40443 [HIGH] CVE-2023-40443: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-40443 Component: Spotlight Impact: An app may be able to gain root privileges Description: The issue was addressed with improved checks.
apple
CVE-2023-40396HIGHCVSS 7.8v142023-09-26
CVE-2023-40396 [HIGH] CVE-2023-40396: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-40396 Component: IOUserEthernet Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.
apple
CVE-2023-32396HIGHCVSS 7.8v142023-09-26
CVE-2023-32396 [HIGH] CVE-2023-32396: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-32396 Component: Dev Tools Impact: An app may be able to gain elevated privileges Description: This issue was addressed with improved checks.
apple
CVE-2023-41984HIGHCVSS 7.8v142023-09-26
CVE-2023-41984 [HIGH] CVE-2023-41984: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-41984 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.
apple
CVE-2023-38615HIGHCVSS 7.8v142023-09-26
CVE-2023-38615 [HIGH] CVE-2023-38615: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-38615 Component: AMD Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.
apple
CVE-2023-40407HIGHCVSS 7.5v142023-09-26
CVE-2023-40407 [HIGH] CVE-2023-40407: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-40407 Component: CUPS Impact: A remote attacker may be able to cause a denial-of-service Description: The issue was addressed with improved bounds checks.
apple
CVE-2023-42970HIGHCVSS 8.8v142023-09-26
CVE-2023-42970 [HIGH] CVE-2023-42970: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-42970 Component: WebKit Impact: Processing web content may lead to arbitrary code execution Description: A use-after-free issue was addressed with improved memory management.
apple
CVE-2023-40452HIGHCVSS 7.1v142023-09-26
CVE-2023-40452 [HIGH] CVE-2023-40452: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-40452 Component: Sandbox Impact: An app may be able to overwrite arbitrary files Description: The issue was addressed with improved bounds checks.
apple
CVE-2023-41995HIGHCVSS 7.8v142023-09-26
CVE-2023-41995 [HIGH] CVE-2023-41995: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-41995 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: A use-after-free issue was addressed with improved memory management.
apple
CVE-2023-41993HIGHCVSS 8.8KEVv142023-09-26
CVE-2023-41993 [HIGH] CVE-2023-41993: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-41993 Component: WebKit Impact: Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. Description: The issue was addressed with improved checks.
apple
CVE-2023-42933HIGHCVSS 7.8v142023-09-26
CVE-2023-42933 [HIGH] CVE-2023-42933: macOS Sonoma 14 Apple Security Update: About the security content of macOS Sonoma 14 Product: macOS Sonoma Version: 14 CVE: CVE-2023-42933 Component: Dev Tools Impact: An app may be able to gain elevated privileges Description: This issue was addressed with improved checks.
apple